Published: 20/12/2018 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

In Artifex Ghostscript up to and including 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript document could exploit this to crash Ghostscript or, possibly, execute arbitrary code in the context of the Ghostscript process. This is a type confusion issue because of failure to check whether the Implementation of a pattern dictionary was a structure type.

Vulnerable Product	Search on Vulmon	Subscribe to Product
artifex ghostscript
debian debian linux 8.0
redhat enterprise linux desktop 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux server 7.0
redhat enterprise linux server eus 7.6
redhat enterprise linux server aus 7.6

Synopsis Important: ghostscript security and bug fix update Type/Severity Security Advisory: Important Topic An update for ghostscript is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring Syste ...

Several vulnerabilities were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which may result in denial of service or the execution of arbitrary code if a malformed Postscript file is processed (despite the -dSAFER sandbox being enabled) This update rebases ghostscript for stretch to the upstream version 926 which includes addition ...

Artifex Ghostscript before 925 allowed a user-writable error exception table, which could be used by remote attackers able to supply crafted PostScript to potentially overwrite or replace error handlers to inject code (CVE-2018-17183) Artifex Ghostscript 925 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involv ...

In Artifex Ghostscript through 925, the setpattern operator did not properly validate certain types A specially crafted PostScript document could exploit this to crash Ghostscript or, possibly, execute arbitrary code in the context of the Ghostscript process This is a type confusion issue because of failure to check whether the Implementation of ...

CWE-704 https://www.ghostscript.com/doc/9.26/News.htm https://semmle.com/news/semmle-discovers-severe-vulnerability-ghostscript-postscript-pdf https://bugs.ghostscript.com/show_bug.cgi?id=700141 https://access.redhat.com/errata/RHSA-2018:3834 http://www.securityfocus.com/bid/106278 https://lists.debian.org/debian-lts-announce/2018/12/msg00019.html http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=693baf02152119af6e6afd30bb8ec76d14f84bbf https://access.redhat.com/errata/RHSA-2018:3834 https://nvd.nist.gov https://www.debian.org/security/./dsa-4346

CVE-2018-19134

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect